|
Message-ID: <alpine.LNX.2.00.1310021411550.15327@forced.attrition.org> Date: Wed, 2 Oct 2013 14:14:00 -0500 (CDT) From: security curmudgeon <jericho@...rition.org> To: oss-security@...ts.openwall.com cc: security@....org Subject: re: Xen Security Advisory 65 (CVE-2013-4344) - qemu SCSI REPORT LUNS buffer overflow : Please refer to the advisories and information from the Qemu project. What advisories and information? Qemu page shows last release Aug 27 and the changelog does not appear to reference this issue. There are no obvious 'security advisory' links off their navigation menu. Could you please include such links in YOUR advisories so we don't have to go chasing them down, since you have clearly seen them given the wording above?
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.